shopify-app-js 0.0.1-security → 1.0.1

package/packages/shopify-app-session-storage-postgresql/CHANGELOG.md

@@ -0,0 +1,210 @@
+# @shopify/shopify-app-session-storage-postgresql
+
+## 3.0.1
+
+### Patch Changes
+
+- 02a8341: Updated dependency on `@shopify/shopify-api` to 9.3.1
+- 321d6a4: Update @shopify/shopify-api to 9.3.2
+- Updated dependencies [02a8341]
+- Updated dependencies [321d6a4]
+  - @shopify/shopify-app-session-storage@2.1.1
+
+## 3.0.0
+
+### Minor Changes
+
+- 64e0246: Update shopify-api version to 9.2.0
+
+### Patch Changes
+
+- 79193cc: Updated the `pg` dependency to v8.11.3
+- f5742c1: Updated dependency on `@shopify/shopify-api`
+- Updated dependencies [f5742c1]
+- Updated dependencies [64e0246]
+  - @shopify/shopify-app-session-storage@2.1.0
+
+## 2.0.4
+
+### Patch Changes
+
+- b4eeb24: Improved and simplified package.json dependencies
+- b998c30: Bump shopify-api version from 9.0.1 to 9.0.2
+- Updated dependencies [b4eeb24]
+- Updated dependencies [b998c30]
+  - @shopify/shopify-app-session-storage@2.0.4
+
+## 2.0.3
+
+### Patch Changes
+
+- d3e4b5e: Updated the dependency on `@shopify/shopify-api`
+- Updated dependencies [d3e4b5e]
+  - @shopify/shopify-app-session-storage@2.0.3
+
+## 2.0.2
+
+### Patch Changes
+
+- 3685bd4: Bump shopify-api to ^8.1.1
+- Updated dependencies [3685bd4]
+  - @shopify/shopify-app-session-storage@2.0.2
+
+## 2.0.1
+
+### Patch Changes
+
+- 6d12840: Updating dependencies on @shopify/shopify-api
+- Updated dependencies [6d12840]
+  - @shopify/shopify-app-session-storage@2.0.1
+
+## 2.0.0
+
+### Major Changes
+
+- f837060: **Removed support for Node 14**
+
+  Node 14 has reached its [EOL](https://endoflife.date/nodejs), and dependencies to this package no longer work on Node 14.
+  Because of that, we can no longer support that version.
+
+  If your app is running on Node 14, you'll need to update to a more recent version before upgrading this package.
+
+  This upgrade does not require any code changes.
+
+### Patch Changes
+
+- a69d6fc: Updating dependency on @shopify/shopify-api to v.8.0.1
+- Updated dependencies [f837060]
+- Updated dependencies [a69d6fc]
+  - @shopify/shopify-app-session-storage@2.0.0
+
+## 1.1.11
+
+### Patch Changes
+
+- 616388d: Updating dependency on @shopify/shopify-api to 7.7.0
+- Updated dependencies [616388d]
+  - @shopify/shopify-app-session-storage@1.1.10
+
+## 1.1.10
+
+### Patch Changes
+
+- 5b862fe: Upgraded shopify-api dependency to 7.6.0
+- Updated dependencies [5b862fe]
+  - @shopify/shopify-app-session-storage@1.1.9
+
+## 1.1.9
+
+### Patch Changes
+
+- 346b623: Updating dependency on @shopify/shopify-api
+- Updated dependencies [346b623]
+  - @shopify/shopify-app-session-storage@1.1.8
+
+## 1.1.8
+
+### Patch Changes
+
+- 13b9048: Updating @shopify/shopify-api dependency to the latest version
+- Updated dependencies [13b9048]
+  - @shopify/shopify-app-session-storage@1.1.7
+
+## 1.1.7
+
+### Patch Changes
+
+- 32296d7: Update @shopify/shopify-api dependency to 7.5.0
+- Updated dependencies [32296d7]
+  - @shopify/shopify-app-session-storage@1.1.6
+
+## 1.1.6
+
+### Patch Changes
+
+- 93e9126: Updating @shopify/shopify-api dependency
+- Updated dependencies [93e9126]
+  - @shopify/shopify-app-session-storage@1.1.5
+
+## 1.1.5
+
+### Patch Changes
+
+- b3453ff: Bumping @shopify/shopify-api dependency to latest version
+- Updated dependencies [b3453ff]
+  - @shopify/shopify-app-session-storage@1.1.4
+
+## 1.1.4
+
+### Patch Changes
+
+- 278a759: Bumps [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) from 8.10.0 to 8.11.0. See pg's [changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) for more details.
+
+## 1.1.3
+
+### Patch Changes
+
+- e1d4f4f: Add @shopify/shopify-api as a peerDependencies entry for each session-storage package, to avoid API library conflicts (e.g., scopesArray.map error). Should help avoid issues like #93
+- 1d007e8: Bumps [@shopify/shopify-api](https://github.com/Shopify/shopify-api-js) from 7.0.0 to 7.1.0. See `@shopify/shopify-api`'s [changelog](https://github.com/Shopify/shopify-api-js/blob/main/packages/shopify-api/CHANGELOG.md) for more details.
+- d4f3891: Bump pg from 8.9.0 to 8.10.0. See [changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) for details.
+- Updated dependencies [e1d4f4f]
+- Updated dependencies [1d007e8]
+  - @shopify/shopify-app-session-storage@1.1.3
+
+## 1.1.2
+
+### Patch Changes
+
+- e4f3415: Bump @shopify/shopify-api from 6.2.0 to 7.0.0. See [changelog](https://github.com/Shopify/shopify-api-js/blob/main/packages/shopify-api/CHANGELOG.md) for details.
+- 8615a8a: PostgreSQL session storage to use a connection pool instead of a single client connection. Fixes #156, #168
+- 3969855: Use decodeURIComponent on password, user, database name fields prior to calling underlying MySQL connection. Fixes #163. Also applied to postgresql adapter.
+- Updated dependencies [e4f3415]
+  - @shopify/shopify-app-session-storage@1.1.2
+
+## 1.1.1
+
+### Patch Changes
+
+- 97346b3: Fix #132: mysql migrator was unable to detect already applied migrations
+- Updated dependencies [97346b3]
+  - @shopify/shopify-app-session-storage@1.1.1
+
+## 1.1.0
+
+### Minor Changes
+
+- becc305: Migrations capabilities that can handle persistence changes for all session storage implementations
+
+### Patch Changes
+
+- 8cadd09: Modify postgres to make table and column names case sensitive. Fixes Shopify/shopify-api-js#460
+- 8f5749f: Increase size of 'scope' column to 1024 for session storage implementation for RDBMS
+- eaa6b18: Update to support PostgreSQL v15 breaking changes
+- b6501b0: Bump typescript to 4.9.5
+- 348b5af: Bump @ypes/pg to 8.6.6
+- Updated dependencies [b6501b0]
+- Updated dependencies [becc305]
+  - @shopify/shopify-app-session-storage@1.1.0
+
+## 1.0.2
+
+### Patch Changes
+
+- 222b755: Updating @shopify/shopify-api to v6.1.0
+- Updated dependencies [222b755]
+  - @shopify/shopify-app-session-storage@1.0.2
+
+## 1.0.1
+
+### Patch Changes
+
+- 1eccbd6: Reapply a fix for a bug where the PostgreSQL session storage always attempted to create the sessions table
+- 866b50c: Update dependencies on shopify-api v6.0.2
+- Updated dependencies [866b50c]
+  - @shopify/shopify-app-session-storage@1.0.1
+
+## 1.0.0
+
+### Major Changes
+
+- Initial public release of @shopify/shopify-app-session-storage-postgresql

package/packages/shopify-app-session-storage-postgresql/LICENSE.md

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) 2022-present, Shopify Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/packages/shopify-app-session-storage-postgresql/README.md

@@ -0,0 +1,39 @@
+# Session Storage Adapter for PostgreSQL
+
+This package implements the `SessionStorage` interface that works with an instance of [PostgreSQL](https://www.postgresql.org).
+Tested using PostgreSQL v15
+
+```js
+import {shopifyApp} from '@shopify/shopify-app-express';
+import {PostgreSQLSessionStorage} from '@shopify/shopify-app-session-storage-postgresql';
+
+const shopify = shopifyApp({
+  sessionStorage: new PostgreSQLSessionStorage(
+    'postgres://username:password@host/database',
+  ),
+  // ...
+});
+
+// OR
+
+const shopify = shopifyApp({
+  sessionStorage: new PostgreSQLSessionStorage(
+    new URL('postgres://username:password@host/database'),
+  ),
+  // ...
+});
+
+// OR
+
+const shopify = shopifyApp({
+  sessionStorage: PostgreSQLSessionStorage.withCredentials(
+    'host.com',
+    'thedatabase',
+    'username',
+    'password',
+  ),
+  // ...
+});
+```
+
+If you prefer to use your own implementation of a session storage mechanism that is compatible with the `@shopify/shopify-app-express` package, see the [implementing session storage guide](https://github.com/Shopify/shopify-app-js/blob/main/packages/shopify-app-session-storage/implementing-session-storage.md).

package/packages/shopify-app-session-storage-postgresql/loom.config.ts

@@ -0,0 +1,27 @@
+import {createPackage, createProjectPlugin} from '@shopify/loom';
+import {buildLibrary} from '@shopify/loom-plugin-build-library';
+
+export default createPackage((pkg) => {
+  pkg.entry({root: './src/postgresql.ts'});
+  pkg.use(
+    buildLibrary({
+      // Required. A browserslist string for specifying your target output.
+      // Use browser targets (e.g. `'defaults'`) if your package targets the browser,
+      // node targets (e.g. `'node 12.22'`) if your package targets node
+      // or both (e.g.`'defaults, node 12.22'`) if your package targets both
+      targets: 'node 16',
+      // Optional. Defaults to false. Defines if commonjs outputs should be generated.
+      commonjs: true,
+      // Optional. Defaults to false. Defines if esmodules outputs should be generated.
+      esmodules: false,
+      // Optional. Defaults to false. Defines if esnext outputs should be generated.
+      esnext: false,
+      // Optional. Defaults to true. Defines if entrypoints should be written at
+      // the root of the repository. You can disable this if you have a single
+      // entrypoint or if your package uses the `exports` key in package.json
+      rootEntrypoints: false,
+      // Optional. Defaults to 'node'. Defines if the jest environment should be 'node' or 'jsdom'.
+      jestTestEnvironment: 'node',
+    }),
+  );
+});

package/packages/shopify-app-session-storage-postgresql/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@shopify/shopify-app-session-storage-postgresql",
+  "version": "3.0.1",
+  "description": "Shopify App Session Storage for PostgreSQL",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Shopify/shopify-app-js.git"
+  },
+  "bugs": {
+    "url": "https://github.com/Shopify/shopify-app-js/issues"
+  },
+  "homepage": "https://github.com/Shopify/shopify-app-js/tree/main/packages/shopify-app-session-storage-postgresql",
+  "author": "Shopify Inc.",
+  "license": "MIT",
+  "main": "./build/cjs/postgresql.js",
+  "types": "./build/ts/postgresql.d.ts",
+  "scripts": {},
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "shopify",
+    "node",
+    "app",
+    "graphql",
+    "rest",
+    "webhook",
+    "Admin API",
+    "Storefront API",
+    "postgresql",
+    "PostgreSQL",
+    "session storage"
+  ],
+  "dependencies": {
+    "pg": "^8.11.3",
+    "pg-connection-string": "^2.6.2"
+  },
+  "peerDependencies": {
+    "@shopify/shopify-api": "^9.3.2",
+    "@shopify/shopify-app-session-storage": "^2.1.1"
+  },
+  "devDependencies": {
+    "@shopify/shopify-app-session-storage-test-utils": "^2.0.1",
+    "@types/pg": "^8.11.0"
+  },
+  "files": [
+    "build/*",
+    "!bundle/*",
+    "!tsconfig.tsbuildinfo",
+    "!node_modules"
+  ]
+}

package/packages/shopify-app-session-storage-postgresql/src/__tests__/migrate-to-case-sensitivity.test.ts

@@ -0,0 +1,344 @@
+import * as child_process from 'child_process';
+import {promisify} from 'util';
+
+import pg from 'pg';
+import {poll} from '@shopify/shopify-app-session-storage-test-utils';
+import {Session} from '@shopify/shopify-api';
+
+import {PostgreSQLSessionStorage} from '../postgresql';
+
+const exec = promisify(child_process.exec);
+
+const dbName = 'migratetocasesensitivitytest';
+const dbURL = new URL(`postgres://shopify:passify@localhost:5435/${dbName}`);
+
+const sessionId = 'test-session-id';
+const expiryDate = new Date();
+expiryDate.setMilliseconds(0);
+expiryDate.setMinutes(expiryDate.getMinutes() + 60);
+const testScopes = ['test_scope'];
+const session = new Session({
+  id: sessionId,
+  shop: 'shop.myshopify.com',
+  state: 'state',
+  isOnline: true,
+  expires: expiryDate,
+  onlineAccessInfo: {associated_user: {id: 67890}} as any,
+  scope: testScopes.toString(),
+  accessToken: 'vwxyz-67890-678',
+});
+
+let storage: PostgreSQLSessionStorage;
+let containerId: string;
+let pool: pg.Pool;
+
+beforeAll(async () => {
+  const runCommand = await exec(
+    `podman run -d -e POSTGRES_DB=${dbName} -e POSTGRES_USER=shopify -e POSTGRES_PASSWORD=passify -p 5435:5432 postgres:15`,
+    {encoding: 'utf8'},
+  );
+
+  containerId = runCommand.stdout.trim();
+
+  pool = new pg.Pool({
+    connectionString: dbURL.toString(),
+    idleTimeoutMillis: 0,
+    connectionTimeoutMillis: 1000,
+  });
+});
+
+afterAll(async () => {
+  await pool.end();
+  await exec(`podman rm -f ${containerId}`);
+});
+
+describe.each(['ShopifySessionsUpperCase', 'shopifysessionslowercase'])(
+  'Migrate to case insensitivity - tablename = %s',
+  (sessionTableName) => {
+    beforeAll(async () => {
+      const query = `
+          DROP TABLE IF EXISTS ${sessionTableName.toLowerCase()};
+          DROP TABLE IF EXISTS ${sessionTableName};
+          CREATE TABLE ${sessionTableName.toLowerCase()} (
+            id varchar(255) NOT NULL PRIMARY KEY,
+            shop varchar(255) NOT NULL,
+            state varchar(255) NOT NULL,
+            isOnline boolean NOT NULL,
+            scope varchar(255),
+            expires integer,
+            onlineAccessInfo varchar(255),
+            accessToken varchar(255)
+          )
+        `;
+
+      await poll(
+        async () => {
+          try {
+            const client = await pool.connect();
+            await client.query(query, []);
+            client.release();
+          } catch (error) {
+            // uncomment for debugging tests
+            // console.error(error);
+            return false;
+          }
+          return true;
+        },
+        {interval: 500, timeout: 20000},
+      );
+    });
+
+    it(`initially satisfies case-insensitive conditions`, async () => {
+      const client = await pool.connect();
+      try {
+        const result = await client.query(
+          `SELECT EXISTS(SELECT tablename FROM pg_catalog.pg_tables WHERE tablename = '${sessionTableName.toLowerCase()}')`,
+        );
+        expect(result.rows[0].exists).toBeTruthy();
+      } catch (error) {
+        console.error(error);
+      }
+      if (sessionTableName.toLowerCase() !== sessionTableName) {
+        // check that the uppercase table does not exist
+        try {
+          const result = await client.query(
+            `SELECT EXISTS(SELECT tablename FROM pg_catalog.pg_tables WHERE tablename = '${sessionTableName}')`,
+          );
+          expect(result.rows[0].exists).toBeFalsy();
+        } catch (error) {
+          console.error(error);
+        }
+      }
+      const entries = session
+        .toPropertyArray()
+        .map(([key, value]) =>
+          key === 'expires'
+            ? [key, Math.floor((value as number) / 1000)]
+            : [key, value],
+        );
+      const query = `
+          INSERT INTO ${sessionTableName}
+          (${entries.map(([key]) => `${key}`).join(', ')})
+          VALUES (${entries.map((_, i) => `$${i + 1}`).join(', ')})
+          ON CONFLICT (id) DO UPDATE SET ${entries
+            .map(([key]) => `${key} = Excluded.${key}`)
+            .join(', ')};
+        `;
+      try {
+        await client.query(
+          query,
+          entries.map(([_key, value]) => value),
+        );
+      } catch (error) {
+        console.error(error);
+      }
+      try {
+        const result = await client.query(`SELECT id FROM ${sessionTableName}`);
+        expect(result.rows.length).toBe(1);
+      } catch (error) {
+        console.error(error);
+      }
+      client.release();
+    });
+
+    it(`migrates previous tablenames and column names to be case-sensitive`, async () => {
+      storage = new PostgreSQLSessionStorage(dbURL, {
+        sessionTableName,
+        port: 5435,
+      });
+      try {
+        await storage.ready;
+      } catch (error) {
+        console.error('DEBUG: error from storage.ready', error);
+      }
+
+      const client = await pool.connect();
+      if (sessionTableName.toLowerCase() !== sessionTableName) {
+        try {
+          const result = await client.query(
+            `SELECT EXISTS(SELECT tablename FROM pg_catalog.pg_tables WHERE tablename = '${sessionTableName.toLowerCase()}')`,
+          );
+          expect(result.rows[0].exists).toBeFalsy();
+        } catch (error) {
+          console.error(error);
+        }
+      }
+      try {
+        const result = await client.query(
+          `SELECT EXISTS(SELECT tablename FROM pg_catalog.pg_tables WHERE tablename = '${sessionTableName}')`,
+        );
+        expect(result.rows[0].exists).toBeTruthy();
+      } catch (error) {
+        console.error(error);
+      }
+      try {
+        const result = await client.query(
+          `SELECT "id" FROM "${sessionTableName}"`,
+        );
+        expect(result.rows.length).toBe(1);
+      } catch (error) {
+        console.error(error);
+      }
+      client.release();
+
+      let sessionFromDB: Session | undefined;
+      try {
+        sessionFromDB = await storage.loadSession(sessionId);
+      } catch (error) {
+        console.error('DEBUG: error from storage.loadSession', error);
+      }
+      await storage.disconnect();
+
+      expect(sessionFromDB).not.toBeUndefined();
+      expect(sessionFromDB!.id).toBe(sessionId);
+      expect(sessionFromDB!.shop).toBe(session.shop);
+      expect(sessionFromDB!.state).toBe(session.state);
+      expect(sessionFromDB!.isOnline).toBe(session.isOnline);
+      expect(sessionFromDB!.expires).toStrictEqual(session.expires);
+      expect(sessionFromDB!.scope).toBe(session.scope);
+      expect(sessionFromDB!.accessToken).toBe(session.accessToken);
+      expect(sessionFromDB!.onlineAccessInfo).toEqual(session.onlineAccessInfo);
+    });
+  },
+);
+
+describe.each(['ShopifySessionsUpperCase', 'shopifysessionslowercase'])(
+  'Table is already case-sensitive - tablename = %s',
+  (sessionTableName) => {
+    beforeAll(async () => {
+      const query = `
+          DROP TABLE IF EXISTS "${sessionTableName.toLowerCase()}";
+          DROP TABLE IF EXISTS "${sessionTableName}";
+          CREATE TABLE "${sessionTableName}" (
+            "id" varchar(255) NOT NULL PRIMARY KEY,
+            "shop" varchar(255) NOT NULL,
+            "state" varchar(255) NOT NULL,
+            "isOnline" boolean NOT NULL,
+            "scope" varchar(255),
+            "expires" integer,
+            "onlineAccessInfo" varchar(255),
+            "accessToken" varchar(255)
+          )
+        `;
+
+      await poll(
+        async () => {
+          try {
+            const client = await pool.connect();
+            await client.query(query, []);
+            client.release();
+          } catch (error) {
+            // uncomment for debugging tests
+            // console.error(error);
+            return false;
+          }
+          return true;
+        },
+        {interval: 500, timeout: 20000},
+      );
+    });
+
+    it(`initially satisfies case-sensitive conditions`, async () => {
+      const client = await pool.connect();
+      try {
+        const result = await client.query(
+          `SELECT EXISTS(SELECT tablename FROM pg_catalog.pg_tables WHERE tablename = '${sessionTableName}')`,
+        );
+        expect(result.rows[0].exists).toBeTruthy();
+      } catch (error) {
+        console.error(error);
+      }
+      const entries = session
+        .toPropertyArray()
+        .map(([key, value]) =>
+          key === 'expires'
+            ? [key, Math.floor((value as number) / 1000)]
+            : [key, value],
+        );
+      const query = `
+          INSERT INTO "${sessionTableName}"
+          (${entries.map(([key]) => `"${key}"`).join(', ')})
+          VALUES (${entries.map((_, i) => `$${i + 1}`).join(', ')})
+          ON CONFLICT ("id") DO UPDATE SET ${entries
+            .map(([key]) => `"${key}" = Excluded."${key}"`)
+            .join(', ')};
+        `;
+      try {
+        await client.query(
+          query,
+          entries.map(([_key, value]) => value),
+        );
+      } catch (error) {
+        console.error(error);
+      }
+      try {
+        const result = await client.query(
+          `SELECT "id" FROM "${sessionTableName}"`,
+        );
+        expect(result.rows.length).toBe(1);
+      } catch (error) {
+        console.error(error);
+      }
+      client.release();
+    });
+
+    it(`doesn't perform any migration`, async () => {
+      storage = new PostgreSQLSessionStorage(dbURL, {
+        sessionTableName,
+        port: 5435,
+      });
+      try {
+        await storage.ready;
+      } catch (error) {
+        console.error('DEBUG: error from storage.ready', error);
+      }
+
+      const client = await pool.connect();
+      if (sessionTableName.toLowerCase() !== sessionTableName) {
+        try {
+          const result = await client.query(
+            `SELECT EXISTS(SELECT tablename FROM pg_catalog.pg_tables WHERE tablename = '${sessionTableName.toLowerCase()}')`,
+          );
+          expect(result.rows[0].exists).toBeFalsy();
+        } catch (error) {
+          console.error(error);
+        }
+      }
+      try {
+        const result = await client.query(
+          `SELECT EXISTS(SELECT tablename FROM pg_catalog.pg_tables WHERE tablename = '${sessionTableName}')`,
+        );
+        expect(result.rows[0].exists).toBeTruthy();
+      } catch (error) {
+        console.error(error);
+      }
+      try {
+        const result = await client.query(
+          `SELECT "id" FROM "${sessionTableName}"`,
+        );
+        expect(result.rows.length).toBe(1);
+      } catch (error) {
+        console.error(error);
+      }
+      client.release();
+
+      let sessionFromDB: Session | undefined;
+      try {
+        sessionFromDB = await storage.loadSession(sessionId);
+      } catch (error) {
+        console.error('DEBUG: error from storage.loadSession', error);
+      }
+      await storage.disconnect();
+
+      expect(sessionFromDB).not.toBeUndefined();
+      expect(sessionFromDB!.id).toBe(sessionId);
+      expect(sessionFromDB!.shop).toBe(session.shop);
+      expect(sessionFromDB!.state).toBe(session.state);
+      expect(sessionFromDB!.isOnline).toBe(session.isOnline);
+      expect(sessionFromDB!.expires).toStrictEqual(session.expires);
+      expect(sessionFromDB!.scope).toBe(session.scope);
+      expect(sessionFromDB!.accessToken).toBe(session.accessToken);
+      expect(sessionFromDB!.onlineAccessInfo).toEqual(session.onlineAccessInfo);
+    });
+  },
+);